How I managed to setup my Ubuntu 12.04 laptop, so I can run Crab2

CVMFS and CMSW and Grid stuff (including automatically up to date certificated and CRL's)

  • now can create a CMSSW release
cd /home/belforte/STEFANO/WORK/CRAB/CMSSW/
cmsrel CMSSW_7_0_2
cd CMSSW_7_0_2
cmsenv

  • but can't do scram b, so I have to copy the directory from lxplus in order to run customized cmsRun

GSI part

  • install globus-proxy-utils via synaptic
  • in my .bashrc
export X509_CERT_DIR=/cvmfs/grid.cern.ch/etc/grid-security/certificates
export X509_VOMSES=/cvmfs/grid.cern.ch/emi-ui-3.7.3-1_sl6v2/etc/vomses
export X509_VOMS_DIR=/cvmfs/grid.cern.ch/emi-ui-3.7.3-1_sl6v2/etc/grid-security/vomsdir
export X509_USER_PROXY=/tmp/x509up_u`id -u`

  • and since voms-proxy-init in globus-proxy-utils is old and does not know to look in X509_VOMSES
mkdir ~/.glite
ln -s /cvmfs/grid.cern.ch/emi-ui-3.7.3-1_sl6v2/etc/vomses  ~/.glite/vomses
  • alternatively could simply run /cvmfs/grid.cern.ch/emi-ui-3.7.3-1_sl6v2/usr/bin/voms-proxy-init

mkdir -p /etc/pki/tls/certs/
cd /etc/pki/tls/certs/
ln -s /etc/ssl/certs/ca-certificates.crt ./ca-bundle.crt

 wget http://www.globus.org/ftppub/gt5/5.2/5.2.3/installers/repo/globus-repository-5.2-stable-precise_0.0.3_all.deb
sudo dpkg -i globus-repository-5.2-stable-precise_0.0.3_all.deb
sudo apt-get update
sudo apt-get install gsi-openssh-clients

CRAB part

  • installed locally CRAB_2_10_7_pre1 from tarball so that can edit

  • finally to setup the crab environment
source /cvmfs/cms.cern.ch/cmsset_default.sh 
#source /cvmfs/grid.cern.ch/emi-ui-3.7.3-1_sl6v2/etc/profile.d/setup-emi3-ui-example.sh 
cd /home/belforte/STEFANO/WORK/CRAB/CMSSW/CMSSW_7_0_2
cmsenv
cd  /home/belforte/STEFANO/WORK/CRAB/TESTCRAB

source /home/belforte/STEFANO/WORK/CRAB/CRAB_2_10_7_pre1/crab.sh 

  • now crab -create works

  • and now also crab -submit and crab -status work

NOTES

  • no myproxy-* yet, need to use dont_check_proxy=1 in crab.cfg

The myproxy problem

myproxy comes with globus-proxy-utils , but it fails with

myproxy-info: error while loading shared libraries: libssl.so.10: cannot open shared object file: No such file or directory

Also libcrypto.so.10 is missing. I did as superuser

cd /usr/lib/x86_64-linux-gnu/
ln -s  libssl.so  libssl.so.10
ln -s  libcrypto.so libcrypto.so.10
but then:
LapSB:TESTCRAB$ myproxy-info -d -s myproxy.cern.ch
myproxy-info: /cvmfs/cms.cern.ch/slc6_amd64_gcc481/cms/cmssw/CMSSW_7_0_2/external/slc6_amd64_gcc481/lib/libldap_r-2.4.so.2: no version information available (required by /usr/lib/libmyproxy.so.5)
myproxy-info: /cvmfs/cms.cern.ch/slc6_amd64_gcc481/cms/cmssw/CMSSW_7_0_2/external/slc6_amd64_gcc481/lib/liblber-2.4.so.2: no version information available (required by /usr/lib/libmyproxy.so.5)
Error authenticating: Connection closed.

If I try to unsetenv scram, like Crab2 does now, only get the authentication error:

LapSB:TESTCRAB$ eval `scram unsetenv -sh`
LapSB:TESTCRAB$ myproxy-info -v -d -s myproxy.cern.ch
MyProxy v5.5 5 Sep 2011 PAM SASL KRB5 LDAP VOMS OCSP
Attempting to connect to 188.184.135.252:7512 
Successfully connected to myproxy.cern.ch:7512 
using trusted certificates directory /cvmfs/grid.cern.ch/etc/grid-security/certificates
Using Proxy file (/tmp/x509up_u1000)
Error authenticating: Connection closed.

For reference, the same on lxplus6 gives (making sure to use same grid-security cert. list):

belforte@lxplus0107/~> export X509_CERT_DIR=/cvmfs/grid.cern.ch/etc/grid-security/certificates
belforte@lxplus0107/~> myproxy-info -v -d -s myproxy.cern.ch
MyProxy v5.9 Jul 2012 PAM SASL KRB5 LDAP VOMS OCSP
Attempting to connect to 188.184.135.252:7512 
Successfully connected to myproxy.cern.ch:7512 
using trusted certificates directory /cvmfs/grid.cern.ch/etc/grid-security/certificates
Using Proxy file (/tmp/x509up_u8516)
server name: /DC=ch/DC=cern/OU=computers/CN=px402.cern.ch
checking that server name is acceptable...
server name matches "myproxy@px402.cern.ch"
authenticated server name is acceptable
username: /C=IT/O=INFN/OU=Personal Certificate/L=Trieste/CN=Stefano Belforte
owner: /C=IT/O=INFN/OU=Personal Certificate/L=Trieste/CN=Stefano Belforte
  timeleft: 131:16:39  (5.5 days)

-- StefanoBelforte - 01 Aug 2014

Edit | Attach | Watch | Print version | History: r5 < r4 < r3 < r2 < r1 | Backlinks | Raw View | WYSIWYG | More topic actions
Topic revision: r5 - 2014-12-04 - StefanoBelforte
 
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    Sandbox All webs login

This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2020 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
or Ideas, requests, problems regarding TWiki? use Discourse or Send feedback